rpm vulnerabilities (openEuler)
12 vulnerabilities.
-
rpmopenEuler Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag 7.1 High -
rpmopenEuler Rpm: command injection in rpmuncompress via unescaped filenames passed to popen() 7.8 High -
rpmopenEuler Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path 7.8 High -
rpmopenEuler Rpm: rpmbuild gettarspec() crafted tar member name → macro injection 7.0 High -
rpmopenEuler Rpm: heap buffer overflow in ndb slot table parsing 5.5 Medium -
rpmopenEuler It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only... 6.7 Medium -
rpmopenEuler A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and... 6.7 Medium -
rpmopenEuler A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to... 6.4 Medium -
rpmopenEuler There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary... 4.7 Medium -
rpmopenEuler A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who... 5.5 Medium -
rpmopenEuler A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can... 4.9 Medium -
rpmopenEuler A flaw was found in RPM's signature check functionality when reading a package file. This flaw... 7.0 High